Файловый менеджер - Редактировать - /home/u243887183/domains/terit.xyz/public_html/static/img/logo/functions.zip
Ðазад
PK �nZl�1( ( functions.phpnu �[��� <?php require_once 'config.php'; require_once '../../app/includes/constant.php'; require_once '../../app/includes/app_start.php'; // require_once '../../app/includes/function_general.php'; function Secure_DATA($e) { return $e; } // Game Adding, Deleting And Updating Action if (isset($_POST['upload_game'])) { $game_name = mysqli_real_escape_string($con, $_POST['game_name']); $game_slug = mysqli_real_escape_string($con, $_POST['game_slug']); $game_desc = mysqli_real_escape_string($con, $_POST['game_description']); $game_frame_url = mysqli_real_escape_string($con, $_POST['game_frame_url']); $game_status = mysqli_real_escape_string($con, $_POST['game_status']); $game_category = mysqli_real_escape_string($con, $_POST['game_category']); $game_banner_url = mysqli_real_escape_string($con, $_POST['game_banner_url']); if (isset($_FILES['game_image'])) { if ($_FILES['game_image']['error'] == 0) { $file_name = rand(111111111, 999999999) . $_FILES['game_image']['name']; if (move_uploaded_file($_FILES['game_image']['tmp_name'], "../../static/uploads/" . $file_name)); { $game_image_url = $site_url . 'static/uploads/' . $file_name; } } else { $game_image_url = mysqli_real_escape_string($con, $_POST['game_image_url']); } } else { $game_image_url = mysqli_real_escape_string($con, $_POST['game_image_url']); } $sql = "INSERT INTO `zon_games`(`game_name`, `game_description`, `game_image_url`, `game_url`, `game_published`, `game_category`, `game_status`, `game_played`, `game_banner_url`, `is_featured`, `game_card_size`) VALUES ('$game_name','$game_desc','$game_image_url','$game_frame_url', '$game_status', '$game_category', 0, 0,'$game_banner_url', 0, '')"; if (mysqli_query($con, $sql)) { @header("location: ../games.php"); } } if (isset($_POST['update_game'])) { $game_id = mysqli_real_escape_string($con, $_POST['game_id']); $game_name = mysqli_real_escape_string($con, $_POST['game_name']); $game_slug = mysqli_real_escape_string($con, $_POST['game_slug']); $game_desc = mysqli_real_escape_string($con, $_POST['game_description']); $game_frame_url = mysqli_real_escape_string($con, $_POST['game_frame_url']); $game_status = mysqli_real_escape_string($con, $_POST['game_status']); $game_category = mysqli_real_escape_string($con, $_POST['game_category']); $game_banner_url = mysqli_real_escape_string($con, $_POST['game_banner_url']); if (isset($_FILES['game_image'])) { if ($_FILES['game_image']['error'] == 0) { $file_name = rand(111111111, 999999999) . $_FILES['game_image']['name']; if (move_uploaded_file($_FILES['game_image']['tmp_name'], "../../static/uploads/" . $file_name)); { $game_image_url = $site_url . 'static/uploads/' . $file_name; } } else { $game_image_url = mysqli_real_escape_string($con, $_POST['game_image_url']); } } else { $game_image_url = mysqli_real_escape_string($con, $_POST['game_image_url']); } $sql = "UPDATE `zon_games` SET `game_name`='$game_name', `game_description`='$game_desc', `game_image_url`='$game_image_url', `game_url`='$game_frame_url', `game_published`='$game_status', `game_category`='$game_category', `game_banner_url`='$game_banner_url' WHERE id=$game_id"; if (mysqli_query($con, $sql)) { @header("location: ../games.php"); } } if (isset($_POST['add_category'])) { $category_name = mysqli_real_escape_string($con, $_POST['game_category']); $category_slug = mysqli_real_escape_string($con, $_POST['game_category_slug']); $category_description = mysqli_real_escape_string($con, $_POST['game_category_description']); if (mysqli_query($con, "insert into zon_category (`name`, `slug`, `description`) values ('$category_name' , '$category_slug', '$category_description') ")) { @header("location: ../categories.php"); } } if (isset($_POST['update_category'])) { $category_name = mysqli_real_escape_string($con, $_POST['game_category']); $category_slug = mysqli_real_escape_string($con, $_POST['game_category_slug']); $category_description = mysqli_real_escape_string($con, $_POST['game_category_description']); $category_id = mysqli_real_escape_string($con, $_POST['category_id']); if (mysqli_query($con, "update zon_category set `name`='$category_name', `slug`='$category_slug', `description`='$category_description' where id=$category_id")) { @header("location: ../categories.php"); } } if (isset($_GET) && !empty($_GET['token_id']) && !empty($_GET['action']) && !empty($_GET['content_type'])) { if ($_GET['content_type'] == 'game') { $action = $_GET['action']; $token_id = $_GET['token_id']; if ($action == 'delete') { if (mysqli_query($con, "DELETE FROM zon_games where id=$token_id")) { @header("location: ../games.php"); } } } } if (isset($_GET) && !empty($_GET['token_id']) && !empty($_GET['action']) && !empty($_GET['content_type'])) { if ($_GET['content_type'] == 'category') { $action = $_GET['action']; $token_id = $_GET['token_id']; if ($action == 'delete') { if (mysqli_query($con, "delete from zon_category where id=$token_id")) { @header("location: ../categories.php"); } } else { echo "Failed"; } } } if (isset($_GET) && !empty($_GET['token_id']) && !empty($_GET['action']) && !empty($_GET['content_type']) && !empty($_GET['url'])) { if ($_GET['content_type'] == 'game') { $url = $_GET['url']; $action = $_GET['action']; $token_id = $_GET['token_id']; if ($action == 'delete') { if (mysqli_query($con, "delete from zon_games where id=$token_id")) { @header("location: $url.php"); } } else { echo "Failed"; } } } if (isset($_POST) && isset($_POST['ads_up_add'])) { $ad_name = mysqli_real_escape_string($con, $_POST['ad_name']); $id = Secure_DATA($_POST['ad_id']); $ad_code = mysqli_real_escape_string($con, $_POST['ad_code']); $ad_off = $_POST['ad_contr']; $sql = "UPDATE zon_ads set `code`='$ad_code', `ad_name`='$ad_name', `status`= 0 where id=$id"; if (!empty($ad_off)) { $sql = "UPDATE zon_ads set `code`='$ad_code', `ad_name`='$ad_name', `status`=1 where id=$id"; } if (mysqli_query($con, $sql)) { @header("location: ../advertisement.php"); } } if (isset($_POST) && isset($_POST['add_page'])) { $page_title = mysqli_escape_string($con, $_POST['page_title']); $page_desc = mysqli_escape_string($con, $_POST['page_desc']); $page_content = mysqli_escape_string($con, $_POST['page_content']); $query = "INSERT INTO `zon_pages` (`title`, `desc`, `content`) VALUES ('$page_title', '$page_desc', '$page_content') "; if (mysqli_query($con, $query)) { @header("location: ../pages.php"); } } if (isset($_GET) && !empty($_GET['token_id']) && !empty($_GET['action']) && !empty($_GET['content_type']) && !empty($_GET['url'])) { if ($_GET['content_type'] == 'page') { $url = $_GET['url']; $action = $_GET['action']; $token_id = $_GET['token_id']; if ($action == 'delete') { if (mysqli_query($con, "delete from zon_pages where id=$token_id")) { @header("location: $url"); } } else { echo "Failed"; } } } if (isset($_POST) && isset($_POST['update_page'])) { $page_title = mysqli_escape_string($con, $_POST['page_title']); $page_desc = mysqli_escape_string($con, $_POST['page_desc']); $page_content = mysqli_escape_string($con, $_POST['page_content']); $id = mysqli_escape_string($con, $_POST['id']); $query = "UPDATE `zon_pages` SET `title`='$page_title', `desc`='$page_desc', `content`='$page_content' where id=$id"; if (mysqli_query($con, $query)) { @header("location: ../pages.php"); } } if (isset($_GET) && !empty($_GET['token_id']) && !empty($_GET['action']) && !empty($_GET['content_type']) && !empty($_GET['url'])) { if ($_GET['content_type'] == 'comment') { $url = $_GET['url']; $action = $_GET['action']; $token_id = $_GET['token_id']; if ($action == 'delete') { if (mysqli_query($con, "delete from zon_comments where id=$token_id")) { @header("location: $url.php"); } } else { echo "Failed"; } } } if (isset($_GET) && !empty($_GET['token_id']) && !empty($_GET['action']) && !empty($_GET['content_type']) && !empty($_GET['url'])) { if ($_GET['content_type'] == 'user') { $url = $_GET['url']; $action = $_GET['action']; $token_id = $_GET['token_id']; if ($action == 'delete') { if (mysqli_query($con, "delete from zon_users where id=$token_id")) { @header("location: $url.php"); } } else { echo "Failed"; } } } if (isset($_POST) && isset($_POST['customize_button'])) { // $section_games_limit = Secure_DATA($_POST['section_games_limit']); // $featured_game_slider = Secure_DATA($_POST['featured_game_slider']); // $popular_views = Secure_DATA($_POST['popular_views']); $site_color = Secure_DATA($_POST['site_color']); // $IsBlog = Secure_DATA($_POST['blog']); $gamepix_sid = Secure_DATA($_POST['gamepix_sid']); $animate_class = Secure_DATA($_POST['animate_class']); // $cursor_color = '#fff'; // $custom_cursor = 0; if (mysqli_query($con, "UPDATE zon_config SET site_color='$site_color', animate_class='$animate_class', gamepix_sid=$gamepix_sid ")) { header("location: ../customize.php"); } }PK �nZ�+��� � configuration.phpnu �[��� <?php // require_once '../../app/includes/function_general.php'; require_once '../../config.php'; require_once '../../app/includes/constant.php'; require_once '../../app/includes/app_start.php'; // $demo = "demo"; // if ($demo === $demo) { // header("Location: ../index.php"); // die(); // } // Secure Data function Secure_DATA($d) { global $socket; return htmlspecialchars(mysqli_real_escape_string($socket, $d)); } // Site Configuration Actions if (isset($_POST) && isset($_POST['site_info'])) { $site_name = Secure_DATA($_POST['site_name']); $profile_tagline = Secure_DATA($_POST['profile_tagline']); $head_code = mysqli_real_escape_string($con, $_POST['head_code']); $footer_content = mysqli_real_escape_string($con, $_POST['footer_content']); $site_title = Secure_DATA($_POST['site_title']); $site_desc = Secure_DATA($_POST['site_desc']); $site_keywords = Secure_DATA($_POST['site_keywords']); $games_title = Secure_DATA($_POST['games_title']); $games_desc = Secure_DATA($_POST['games_desc']); $play_title = Secure_DATA($_POST['play_title']); $play_desc = Secure_DATA($_POST['play_desc']); $profile_title = Secure_DATA($_POST['profile_title']); $profile_desc = Secure_DATA($_POST['profile_desc']); $category_title = Secure_DATA($_POST['category_title']); $category_desc = Secure_DATA($_POST['category_desc']); $u = ",`games_title`='$games_title',`games_desc`='$games_desc',`play_title`='$play_title',`play_desc`='$play_desc',`profile_title`='$profile_title',`profile_desc`='$profile_desc',`category_title`='$category_title',`category_desc`='$category_desc'"; $sql = "UPDATE zon_config set `site_name`='$site_name', `profile_tagline`='$profile_tagline', `head_code`='$head_code', `footer_content`='$footer_content', `site_title`='$site_title', `site_desc`='$site_desc', `site_keywords`='$site_keywords'"; if (isset($_FILES['logo']) && isset($_FILES) && $_FILES['logo']['error'] == 0) { $logo_name = rand(111111111, 999999999) . $_FILES['logo']['name']; $logo_tmp_name = $_FILES['logo']['tmp_name']; if (move_uploaded_file($logo_tmp_name, "../../static/img/logo/" . $logo_name)) { $logo_name = $logo_name; $sql = "UPDATE zon_config set `site_name`='$site_name', `profile_tagline`='$profile_tagline', `site_logo_light`='$logo_name', `head_code`='$head_code', `site_title`='$site_title', `site_desc`='$site_desc', `site_keywords`='$site_keywords'"; } } if (isset($_FILES['dark_logo']) && isset($_FILES) && $_FILES['dark_logo']['error'] == 0) { $dark_logo_name = rand(111111111, 999999999) . $_FILES['dark_logo']['name']; $dark_logo_tmp_name = $_FILES['dark_logo']['tmp_name']; if (move_uploaded_file($dark_logo_tmp_name, "../../static/img/logo/" . $dark_logo_name)) { $dark_logo_name = $dark_logo_name; $sql = "UPDATE zon_config set `site_name`='$site_name', `profile_tagline`='$profile_tagline', `site_logo_sm`='$dark_logo_name', `head_code`='$head_code', `site_title`='$site_title', `site_desc`='$site_desc', `site_keywords`='$site_keywords'"; } } if (isset($_FILES['favicon']) && isset($_FILES) && $_FILES['favicon']['error'] == 0) { $favicon_logo_name = rand(111111111, 999999999) . $_FILES['favicon']['name']; $favicon_logo_tmp_name = $_FILES['favicon']['tmp_name']; if (move_uploaded_file($favicon_logo_tmp_name, "../../static/img/logo/" . $favicon_logo_name)) { $favicon_logo_name = $favicon_logo_name; $sql = "UPDATE zon_config set `site_name`='$site_name', `profile_tagline`='$profile_tagline', `site_favicon`='$favicon_logo_name', `head_code`='$head_code', `site_title`='$site_title', `site_desc`='$site_desc', `site_keywords`='$site_keywords'"; } } $sql .= $u; if (mysqli_query($con, $sql)) { @header("location: ../settings.php"); } } PK �nZ�~e�, , config.phpnu �[��� <?php require_once('../../config.php'); ?>PK �nZ��� add-user.phpnu �[��� <?php session_start(); require_once '../../config.php'; require_once '../../app/includes/constant.php'; require_once '../../app/includes/app_start.php'; function ValidateFields($field, $var) { global $socket; $Validate = "select * from zon_users where $field='$var'"; return mysqli_num_rows(mysqli_query($socket, $Validate)); } // User Adding, Updating And Deleteing Action if (isset($_POST['add_user']) && isset($_POST)) { // $id = mysqli_real_escape_string($con, $_POST['id']); $name = mysqli_real_escape_string($con, $_POST['name']); $email = mysqli_real_escape_string($con, $_POST['email']); $username = mysqli_real_escape_string($con, $_POST['username']); $password = mysqli_real_escape_string($con, $_POST['password']); $user_status = mysqli_real_escape_string($con, $_POST['user_status']); $_SESSION['name'] = $name; $_SESSION['email'] = $email; $_SESSION['username'] = $username; $_SESSION['password'] = $password; $user_pic = "user_pic.png"; if ($_FILES['user_pic']['error'] == 0) { $file_name = rand(111111111, 99999999) . $_FILES['user_pic']['name']; $file_tmp = $_FILES['user_pic']['tmp_name']; if (move_uploaded_file($file_tmp, "../../static/img/" . $file_name)) { $user_pic = $file_name; } } if (ValidateFields('email', $email)) { @header("location: ../add-users.php?emailError=Email Already Exist"); // $bool = true; $emil = false; } else { $emil = true; } if (ValidateFields('username', $username)) { @header("location: ../add-users.php?usernameError=Username Already Exist"); $usern = false; } else { $usern = true; } $query = "INSERT INTO zon_users (`name`, `email`, `username`, `password`, `user_pic`, `status`, `is_admin`) VALUES ('$name', '$email', '$username', '$password', '$user_pic', $user_status, 0) "; if ($usern == true && $emil == true) { if (mysqli_query($con, $query)) { unset($_SESSION['name']); unset($_SESSION['email']); unset($_SESSION['username']); unset($_SESSION['password']); @header("location: ../users.php"); } } } if (isset($_POST['update_user']) && isset($_POST)) { $id = mysqli_real_escape_string($con, $_POST['user_id']); $name = mysqli_real_escape_string($con, $_POST['name']); $email = mysqli_real_escape_string($con, $_POST['email']); $username = mysqli_real_escape_string($con, $_POST['username']); $password = mysqli_real_escape_string($con, $_POST['password']); $user_status = mysqli_real_escape_string($con, $_POST['user_status']); // $user_pic = "user_pic.png"; if (ValidateFields('email', $email) == 2 && ValidateFields('username', $username) == 2) { @header("location: ../add-users.php?action=update&token_id=$id&emailError=Email Already Exist&usernameError=Username Already Exist"); $user = false; } else { $user = true; } if (ValidateFields('email', $email) == 2) { @header("location: ../add-users.php?action=update&token_id=$id&emailError=Email Already Exist"); $emil = false; } else { $emil = true; } if (ValidateFields('username', $username) == 2) { @header("location: ../add-users.php?action=update&token_id=$id&usernameError=Username Already Exist"); $usern = false; } else { $usern = true; } $query = "UPDATE zon_users SET `name`='$name', `email`='$email', `username`='$username', `password`='$password', `status`=$user_status where id=$id "; if ($_FILES['user_pic']['error'] == 0) { $file_name = rand(111111111, 99999999) . $_FILES['user_pic']['name']; $file_tmp = $_FILES['user_pic']['tmp_name']; if (move_uploaded_file($file_tmp, "../../static/img/" . $file_name)) { $user_pic = $file_name; $query = "UPDATE zon_users SET `name`='$name', `email`='$email', `username`='$username', `password`='$password', `user_pic`='$user_pic', `status`=$user_status where id=$id "; } } if ($usern == true && $emil == true && $user == true) { if (mysqli_query($con, $query)) { unset($_SESSION['name']); unset($_SESSION['email']); unset($_SESSION['username']); unset($_SESSION['password']); @header("location: ../users.php"); } } }PK �nZ���"